News for hackers. Stuff that matters.
Re:Why Don't Software Developers Use Static Analysis Tools t... by flohofwoe on Friday June 26, 2015 @04:59AM (#9783081)
Have you looked at the clang analyzer that's integrated into Xcode (http://clang-analyzer.llvm.org/)? It doesn't catch everything, and sometimes gives false positives, but it is quite amazing how it visualizes problems in the program flow, going through several levels in the call hierarchy, following variable assignments over function calls, etc... in a few cases I was convinced that a problem was a false positive until I really took the time to understand what the static analyzer is trying to tell me and it turned out to be actual bugs.

In my opinion it is mostly poor integration into the coding workflow, and poor visualization of the analyzer warnings that lead to too little use of static code analysis, and another is a too wide-spread 'if it works at all, ship it' mentality.

Re:Why Don't Software Developers Use Static Analysis Tools t... by dschiptsov on Friday June 26, 2015 @08:24AM (#9783810)
Clang's tooling is amazing, not a single word against it. I gave Java as an example intentionally.